Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa
File:                     eab971f4-114c-3798-a9f4-6c0ad419f866.roa (raw, json)
Hash identifier:          bGYftdW45f7mThEjET0ZsvyUAoHzySg5Us4ozUNP/Ec=
Subject key identifier:   82:E9:F2:DD:50:12:2F:F9:BF:85:64:2C:07:E9:10:4C:21:08:B5:40
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F432858498339D0FE66FF02F852A3A530
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     16591
IP address blocks:        136.61.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:d0:fe:66:ff:02:f8:52:a3:a5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=abdda632-7c81-4058-95d4-1dfd675d7bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:84:d4:75:6c:34:0d:ff:eb:1c:d6:b6:b1:59:
                    a8:89:1a:5f:01:8b:95:b6:f0:ff:d5:9f:83:fa:1c:
                    62:86:0a:b2:88:db:92:30:fa:cc:8b:ae:ee:06:71:
                    cf:35:85:39:c2:58:54:52:29:d1:17:71:6e:cf:74:
                    81:03:42:68:ac:ad:f9:79:96:d8:a0:13:ac:22:df:
                    0b:47:3e:d2:fe:e3:68:9f:83:ee:02:c4:1a:81:ff:
                    90:18:e8:b3:76:da:a8:de:07:c0:4b:3d:11:d0:c0:
                    0e:ad:78:34:5d:e6:ed:d2:e3:2e:4b:24:21:39:71:
                    86:fd:59:2a:33:60:07:a7:32:db:82:0e:8e:61:89:
                    71:21:8d:f3:30:92:74:49:70:62:bc:df:a8:b8:89:
                    eb:28:1d:69:b2:27:ed:80:22:8e:de:9f:1f:a8:2b:
                    59:7f:d7:1d:18:45:c7:1c:d8:91:f2:84:84:07:73:
                    fc:71:88:fc:64:8a:3f:d4:4e:89:3d:4a:3f:5d:c9:
                    54:38:6c:f3:08:82:c9:61:2e:32:ad:15:ce:0c:e2:
                    44:ac:61:88:aa:38:57:f4:53:b6:75:f4:73:d2:1e:
                    d9:7e:62:85:6e:82:88:0c:83:c1:db:a7:94:ef:64:
                    e9:d7:62:a0:bd:e2:6f:02:ca:c9:55:60:37:6d:9a:
                    17:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E9:F2:DD:50:12:2F:F9:BF:85:64:2C:07:E9:10:4C:21:08:B5:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.61.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:60:8f:8b:2e:59:0f:c8:4f:fe:e0:96:bd:3b:88:21:81:56:
         88:97:06:76:07:ac:d3:7d:d6:85:23:7c:06:83:67:f4:3a:79:
         06:a8:3f:14:cb:11:0c:0b:ae:a9:6a:dc:d0:95:08:7e:2e:2d:
         a7:a8:b4:45:86:e1:29:55:3f:2d:c7:fd:4e:8f:35:85:38:b0:
         a5:13:4b:64:fa:f7:24:13:5d:bc:68:8d:79:c0:ba:e0:3a:e2:
         84:3c:a6:03:47:a0:e6:93:83:e4:ac:7c:2b:e1:65:a7:41:89:
         bf:ee:5b:2d:63:c4:c8:c9:f6:b6:f8:31:60:27:34:26:b8:45:
         02:81:c3:28:3e:8f:60:25:c4:69:ca:f2:a3:2d:38:fe:aa:cc:
         73:2f:6b:fd:58:e0:cd:7d:db:81:74:86:9d:e1:1a:5e:41:51:
         d2:b8:68:35:5a:75:31:c1:17:aa:3b:99:44:21:13:a9:f3:b0:
         d8:dd:d0:29:c7:62:85:ad:e0:5e:24:36:38:d8:c5:5b:e7:b0:
         98:e7:bb:ba:67:02:34:a2:4b:e6:a9:e5:4d:d4:18:4a:7e:35:
         be:84:17:46:d2:2d:10:23:62:e3:62:30:47:52:18:72:63:14:
         7b:35:bc:96:66:ab:64:97:dd:67:ab:1b:e9:7b:28:a7:7e:a0:
         82:11:b3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 23:43:53 2025 by rpki-client